5e2c81b0784e853d06aa823baf978bfd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e2c81b0784e853d06aa823baf978bfd_JaffaCakes118
Size

71KB
MD5

5e2c81b0784e853d06aa823baf978bfd
SHA1

2e669d2f0a1561c3cdb2e82dd9e96116ffff368b
SHA256

0b397ec5376070132dea33daf2658b7942ff75cf8fce6518ddf7d5090ed16f34
SHA512

9e610811acbbf46375e35f05ccc3b3b6af49a0ea7fc629b35360e3a1f694ca62c14fa89710ba10c7621e389a82be21a3762a0fb0b79504511596785233b15af3
SSDEEP

1536:qW0XrnR8JTACEixqrEfnIYRcal5nkBZcCtPSD6PC11m:87nOJkCHMrEvIYeaDKcWM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e2c81b0784e853d06aa823baf978bfd_JaffaCakes118

Files

5e2c81b0784e853d06aa823baf978bfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0e4fe11ee15fbf9196f863787ed8340

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemPowerStatus
ConsoleMenuControl
VerifyVersionInfoW
LocalFree
GetDiskFreeSpaceA
CreateDirectoryA
ReadConsoleInputA
FindFirstChangeNotificationA
EnumCalendarInfoExA
GetBinaryType
SetComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE